TI-2022-01626 CVE-2022-1760 · GHSA-x93g-3xq3-cp8qCore Control <= 1.2.1 - Arbitrary Settings Update via CSRFPriority MEDIUM 53The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attackCVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00285 · Published 2024-01-16 · No fix listed CWE-352
